Approved changes feed: RSS · Atom
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tianocore (ccbf46b2-b58a-5da6-848c-b10970eb3ad4) |
|---|---|
| Product | Edk2 (26013cd7-5d6e-50a1-b64f-acdb9bfd5566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/tianocore/edk2 |
purl2cpe | 2026-06-01 10:18:20.951780 |
pkg:deb/debian/edk2 |
purl2cpe | 2026-06-01 10:18:20.951782 |
pkg:deb/ubuntu/edk2 |
purl2cpe | 2026-06-01 10:18:20.951784 |
pkg:github/tianocore/edk2 |
purl2cpe | 2026-06-01 10:18:20.951785 |
pkg:github/tianocore/tianocore.github.io |
purl2cpe | 2026-06-01 10:18:20.951787 |
pkg:rpm/centos/edk2 |
purl2cpe | 2026-06-01 10:18:20.951788 |
pkg:rpm/fedora/edk2 |
purl2cpe | 2026-06-01 10:18:20.951789 |
pkg:rpm/opensuse/edk2 |
purl2cpe | 2026-06-01 10:18:20.951791 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-97631 |
vulnerable | 2026-11-03 10:15:26.392074 |
Pre-boot RCE in EDK II PXE driver
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds
Write”, Classic
Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability
can lead to arbitrary
code execution. It could also impact
Confidentiality,
Integrity,
and Availability.
Published: 2026-10-22T16:32:27.619Z
Updated: 2026-10-30T19:34:40.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3770 |
vulnerable | 2026-06-08 07:23:09.866627 |
SMM IDT Privilege Escalation Vulnerability
HIGH (7)
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Published: 2025-08-07T00:42:14.628Z
Updated: 2025-08-07T13:28:12.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2296 |
vulnerable | 2026-06-08 07:16:56.747724 |
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
Published: 2025-12-09T15:00:48.437Z
Updated: 2025-12-09T15:11:26.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2295 |
vulnerable | 2026-06-08 07:16:56.747251 |
Potential iSCSI R2T PDU Vulnerability
LOW (3.5)
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.
Published: 2025-03-14T21:35:10.484Z
Updated: 2025-03-18T16:19:50.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38805 |
vulnerable | 2026-06-08 06:41:48.136236 |
iSCSI Remote Memory Corruption and Denial of Service
MEDIUM (6.3)
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.
Published: 2025-08-12T14:13:28.174Z
Updated: 2025-08-12T14:34:39.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38798 |
vulnerable | 2026-06-08 06:41:48.135968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38797 |
vulnerable | 2026-06-08 06:41:48.135554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38796 |
vulnerable | 2026-06-08 06:41:48.135230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1298 |
vulnerable | 2026-06-08 06:25:39.761695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45237 |
vulnerable | 2026-06-08 06:12:42.382986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45236 |
vulnerable | 2026-06-08 06:12:42.382473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45235 |
vulnerable | 2026-06-08 06:12:42.382040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45234 |
vulnerable | 2026-06-08 06:12:42.381495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45233 |
vulnerable | 2026-06-08 06:12:42.381043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45232 |
vulnerable | 2026-06-08 06:12:42.380547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45231 |
vulnerable | 2026-06-08 06:12:42.379780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45230 |
vulnerable | 2026-06-08 06:12:42.379149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45229 |
vulnerable | 2026-06-08 06:12:42.377484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36765 |
vulnerable | 2026-06-08 05:46:07.709211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36764 |
vulnerable | 2026-06-08 05:46:07.708735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36763 |
vulnerable | 2026-06-08 05:46:07.708277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38578 |
vulnerable | 2026-06-08 05:33:47.915550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38575 |
vulnerable | 2026-06-08 05:33:47.897326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28210 |
vulnerable | 2026-06-08 05:31:23.729097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14584 |
vulnerable | 2026-06-08 05:12:55.056232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5731 |
vulnerable | 2026-06-08 05:09:49.287415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8271 |
vulnerable | 2026-06-08 05:06:08.326195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.